Squid server sensitive to AD/DC machine changes

Dave Augustus davea at support.kcm.org
Tue Sep 7 22:10:55 GMT 2004


Jerry,

That solution makes sense and I have recompiled krb and samba, adding
the configure statement of KRB to use SRV records.

Unfortunately,  I won't be able to test this until the next problem
occurs.

Thanks again,
Dave

On Tue, 2004-09-07 at 13:06, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Dave Augustus wrote:
> | Hello All,
> |
> | Any time a machine is added to, or taken out of,
> | the Domain Controllers(DC) or Active Directory(AD)
> | servers, I have to manually edit krb5.conf and duplicate
> | the changes by hand in order for proxy
> | authentication to be seemless- no auth popup.
> 
> You should be using SRV records instead.  You will need
> to recompile the krb5 libs to support this (unless you
> already have).
> 
> 
> 
> 
> 
> cheers, jerry
> - ---------------------------------------------------------------------
> Alleviating the pain of Windows(tm)      ------- http://www.samba.org
> GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
> "If we're adding to the noise, turn off this song"--Switchfoot (2003)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFBPfiIIR7qMdg1EfYRArxhAKDXYzskHDgcKUcNOcWJNrtXzz8PTQCgp43y
> iY0Lp/C2dRgi3b7uLiaNlmw=
> =Tuuf
> -----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20040907/05b61543/attachment.bin


More information about the samba-technical mailing list